Cyber Threat Detection Principal (IDS/IPS, Splunk)

General Dynamics Information Technology (GDIT); Colorado Springs (CO); On-site; USD 149,000 - 201,000; Full time

Job summary

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal in Colorado Springs to advance national security missions in cyber. The role leads cyber tool stacks, develops defensive rules, and analyzes incidents for the DIA.

The position requires 8+ years of related experience, a BS degree or equivalent, and TS SCI with Polygraph clearance. You will work on-site at the customer location and guide junior staff while collaborating with government partners.

Qualifications

• BS Degree or equivalent experience
• 8+ years of related experience
• TS SCI / with Polygraph security clearance required
• US citizenship required
• Role requires work at customer site

Responsibilities

• Lead/Manage/Support our customers cyber tool stack and ability to implement defensive rules.
• Collaborate with other government agencies to record and prepare incident reports and analysis methodology and results.
• Provide insight to Detection and Response teams on signature functionality and signature tuning as needed.
• Monitoring and analyzing signature alerts from IDS/IPS for false positives.
• Creating Splunk Dashboards
• Provide guidance and work leadership to less-experienced staff
• Utilize Splunk, Snort signatures, Regular Expressions, Suricata, Palo Alto Firewalls, Fidelis, etc
• Experience using advanced data analytics tools and techniques, such as Splunk, SQL, Python, and statistical modeling.

Skills

Cyber Defense

Data Analysis

Information Assurance

Education

BS Degree or equivalent

Tools

Splunk

Snort

Regular Expressions

Suricata

Palo Alto Firewalls

Fidelis

Yara rules

PCRE

Job description

General Dynamics Information Technology (GDIT) is seeking a Cybersecurity Analyst Principal in Colorado Springs to advance national security missions in cyber. The role leads cyber tool stacks, develops defensive rules, and analyzes incidents for the DIA.

The position requires 8+ years of related experience, a BS degree or equivalent, and TS SCI with Polygraph clearance. You will work on-site at the customer location and guide junior staff while collaborating with government partners.